Documentation ¶
Overview ¶
Package securelaunch takes integrity measurements before launching the target system.
Index ¶
- Variables
- func AddToPersistQueue(desc string, data []byte, location string, defFile string) error
- func ClearPersistQueue() error
- func GetBlkInfo() error
- func GetMountedFilePath(inputVal string, flags uintptr) (string, error)
- func GetStorageDevice(input string) (storage.BlockDev, error)
- func MountDevice(device storage.BlockDev, flags uintptr) (string, error)
- func UnmountAll()
- func WriteToFile(data []byte, dst, defFileName string) (string, error)
Constants ¶
This section is empty.
Variables ¶
var Debug = func(string, ...interface{}) {}
Debug enables verbose logs if kernel cmd line has uroot.uinitargs=-d flag set. kernel cmdline is checked in sluinit.
var StorageBlkDevices []storage.BlockDev
StorageBlkDevices helps securelaunch pkg mount devices.
Functions ¶
func AddToPersistQueue ¶
AddToPersistQueue enqueues an action item to persistData slice so that it can be deferred to the last step of sluinit.
func ClearPersistQueue ¶
func ClearPersistQueue() error
ClearPersistQueue persists any pending data/logs to disk
func GetBlkInfo ¶
func GetBlkInfo() error
GetBlkInfo calls storage package to get information on all block devices. The information is stored in a global variable 'StorageBlkDevices' If the global variable is already non-zero, we skip the call to storage package.
In debug mode, it also prints names and UUIDs for all devices.
func GetMountedFilePath ¶
GetMountedFilePath returns a file path corresponding to a <device_identifier>:<path> user input format. <device_identifier> may be a Linux block device identifier like sda or a FS UUID.
func GetStorageDevice ¶
GetStorageDevice parses input of type UUID:/tmp/foo or sda2:/tmp/foo, and returns any matching devices.
func MountDevice ¶
MountDevice looks up mountCache map. if no entry is found, it mounts a device and updates cache, otherwise returns mountPath.
func UnmountAll ¶
func UnmountAll()
UnmountAll loops detaches any mounted device from the file heirarchy.
Types ¶
This section is empty.
Directories ¶
Path | Synopsis |
---|---|
Package eventlog parses kernel event logs and saves the parsed data on a file on disk.
|
Package eventlog parses kernel event logs and saves the parsed data on a file on disk. |
Package launcher boots the target kernel.
|
Package launcher boots the target kernel. |
Package measurement provides different collectors to hash files, disks, dmi info and cpuid info.
|
Package measurement provides different collectors to hash files, disks, dmi info and cpuid info. |
Package policy locates and parses a JSON policy file.
|
Package policy locates and parses a JSON policy file. |
Package tpm reads and extends pcrs with measurements.
|
Package tpm reads and extends pcrs with measurements. |